Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet mana...
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-89203
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing us...
|
4.3 Medium | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-89202
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection re...
|
6.5 Medium | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-89201
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility n...
|
7.5 High | — | 0,39% | 13 Okt 2026 |
|
CVE-2026-89200
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields...
|
6.7 Medium | — | 0,18% | 13 Okt 2026 |
|
CVE-2026-89199
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via spe...
|
8.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-89198
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uplo...
|
8.8 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-89197
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notific...
|
8.8 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-89196
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed d...
|
8.8 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-85115
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore...
|
5.5 Medium | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-85114
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames...
|
7.5 High | — | 0,44% | 13 Okt 2026 |
|
CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the...
|
8.3 High | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-78556
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate whe...
|
7.4 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-72895
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO...
|
7.7 High | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page.
This could allow...
|
6.1 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.
This...
|
6.1 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.
This could all...
|
6.1 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page.
This could allow...
|
9.6 Critical | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-63353
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
This could allow an attacker to soc...
|
9.6 Critical | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-63352
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attac...
|
6.1 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-63351
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace pa...
|
6.1 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-63350
Affected devices do not properly restrict executable content contained in imported trace files.
This could allow an attacker to social engineer an authorized user who...
|
9.6 Critical | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-59241
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Upda...
|
8.8 High | — | 0,50% | 13 Okt 2026 |
|
CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive...
|
9.1 Critical | — | 0,46% | 13 Okt 2026 |
|
CVE-2026-44414
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial...
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-109854
A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory...
|
2.5 Low | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-109162
Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the...
|
6.3 Medium | — | 0,51% | 13 Okt 2026 |
|
CVE-2026-109152
A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handle...
|
5.4 Medium | — | 0,56% | 13 Okt 2026 |
|
CVE-2026-109149
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolle...
|
5.3 Medium | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-109144
A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulatio...
|
5.3 Medium | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-102076
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions),...
|
7.5 High | — | 0,57% | 13 Okt 2026 |
|
CVE-2026-102075
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions),...
|
7.5 High | — | 0,57% | 13 Okt 2026 |
|
CVE-2026-102074
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions),...
|
7.5 High | — | 0,57% | 13 Okt 2026 |
|
CVE-2026-102073
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions),...
|
8.2 High | — | 0,46% | 13 Okt 2026 |
|
CVE-2026-89309
The authorization middleware of the WMS MobileServer
fails to require authentication in two distinct cases. First, it
only requires an Authorization header for GET and HE...
|
10.0 Critical | — | 0,39% | 13 Okt 2026 |
|
CVE-2026-96535
Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of...
|
5.1 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-13138
Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.
This issue...
|
8.6 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-109699
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a...
|
5.4 Medium | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-109697
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affe...
|
6.5 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-109696
Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af...
|
5.4 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-109691
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-l...
|
6.5 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-109687
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Inj...
|
7.6 High | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109684
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/...
|
5.3 Medium | — | 0,18% | 13 Okt 2026 |
|
CVE-2026-109143
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/del...
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109116
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the...
|
7.3 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-109115
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the...
|
7.3 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109114
A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of t...
|
7.3 High | — | 0,51% | 13 Okt 2026 |
|
CVE-2026-109110
A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command...
|
10.0 Critical | — | 2,0% | 13 Okt 2026 |
|
CVE-2026-108496
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue...
|
5.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-108495
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows Stored XSS.This issue af...
|
6.5 Medium | — | 0,14% | 13 Okt 2026 |